Digital Forensics in Small Devices: RFID Tag Investigation

Wu, Ni, Janecek, & Nordstad, 2007) raise a number of research issues associated
with RFID investigations.
Nevertheless, each of these references has guidance for research and
specific details of small-device forensic techniques. The literature reviewed
(Chapter 2) shows that research is leading towards knowledge of better system
architectures and to improve best practice guidance knowledge for digital
investigators (see Chapter 5; Section 5.3). The National Institute of Justice (NIJ)
Report (2005) also continues the theme by specifying best forensic investigator
practice for small devices – but does not report RFID chip practice. Therefore,
this appears to be a gap in the current professional literature.
1.2 MOTIVATION OF THE RESEARCH
RFID tags are used in the commercial retail sector for stock management
(Chalasani, Boppana, & Sounderpandian, 2005). A tag is attached to a SI so that
the identity of the SI is accessible by digital scanning. The cost advantage is
apparent in various stock management processes including audit, transaction, and
entry (for example in a book shop the contents of a carton may be individually
scanned and data matched without opening a carton). However, the risk of
fraudulent exploitation of RFID stock management systems escalates when more
expensive tags are used (usually on more expensive SI). The higher risk tags are
read/write and/or active. The appetite for risk also escalates with higher valued SI
and the parallel increase in opportunity to crack a system. The utility value to the
retailer of RFID tags is transaction efficiency and inventory control but the trade-
off is trust in the system. The violation of trust may occur in many ways and be
demonstrated by educated theft of property. The residual risk of system violation
requires a forensic readiness capability that can inform the system security
module on how best to treat a risk. In addition, the evidence requires identification,
preservation, and analysis so that perpetrators may be prosecuted. The retailer has
balanced a cost-benefit analysis to invest in such a stock management system but
may not realized the forecasted benefits in the event of negative control risks
materializing (Altschaffel, Kiltz, & Dittmann, 2009).
The research interest in this project is to scope the risk of violation in a
RFID stock management system (the Business System), to document the location
3